Description cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504). References https://documentation.cpanel.net/display/CL/82+Change+Log